Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: w8giCxQrMeeSEiDisnLhDZNfzu8Hhg7RTkfmJPF5q2E=
Subject key identifier: DD:52:BB:AF:4A:FD:41:2B:38:82:54:4C:43:42:93:3F:E1:F1:3F:21
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 01A151E3D9D14A21BA17D6580987CEB7AB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 17B1
Signing time: Mon 19 Oct 2026 02:00:49 +0000
Manifest this update: Mon 19 Oct 2026 02:00:49 +0000
Manifest next update: Tue 20 Oct 2026 02:00:49 +0000
Files and hashes: 1: beStaP3U9BouVtR6HKL7Bht809g.roa (hash: 9C0Yz+gtWBKD86eXJ/yNK0jQEWAJqpkTW4DLxbpVN08=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: zXMsChZKpH9AJZp5Jly/g14N4B1yfemtH2E1J4j5xeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e3:d9:d1:4a:21:ba:17:d6:58:09:87:ce:b7:ab:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Oct 19 02:00:49 2026 GMT
Not After : Oct 20 02:00:49 2026 GMT
Subject: CN=dd52bbaf4afd412b3882544c4342933fe1f13f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:13:46:69:13:e4:62:80:b0:06:8b:ef:bf:
3f:d7:1a:63:d2:5d:ab:a7:b1:f6:28:a9:b0:ab:84:
09:f7:96:2e:b0:93:cf:6e:3a:3b:82:20:51:09:83:
84:18:ab:c5:82:2f:3d:e7:b8:cc:7a:6d:09:f8:d5:
20:1c:11:31:6c:32:64:7b:4c:26:61:df:81:9b:ae:
d2:8d:3f:a4:c8:cc:24:0f:7d:d7:42:25:19:61:9a:
90:a0:0e:93:42:55:ce:61:ce:a4:8b:7e:cc:0e:17:
b3:ff:bc:cc:7d:b2:fd:00:c7:f4:7c:47:9f:69:89:
c8:45:e9:2e:c7:97:8a:af:07:72:f8:10:9d:28:8c:
7c:9d:79:d8:d2:13:a4:5b:cb:08:1b:da:55:6f:0a:
a7:4c:9f:4b:50:90:97:b4:7d:60:55:98:eb:46:0d:
78:ca:75:b2:c1:7a:1b:17:21:4d:48:21:6a:b5:1f:
94:75:9a:45:00:92:de:0d:67:49:c6:32:b4:ea:d5:
f1:56:33:41:e2:ca:9e:45:e0:57:b9:82:88:36:b1:
d7:10:5f:6b:d0:5f:b0:ef:f0:7f:93:ac:a9:5a:1f:
ba:31:43:33:7e:dd:e2:c8:7a:c6:6f:27:ba:58:96:
b4:b6:b8:a8:cc:27:c5:8b:ad:65:ac:5b:6f:71:ef:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:BB:AF:4A:FD:41:2B:38:82:54:4C:43:42:93:3F:E1:F1:3F:21
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:63:5f:a0:36:e1:4d:1c:6a:da:54:78:09:62:e5:e4:00:5e:
92:ef:05:23:68:70:92:3b:f6:84:4c:29:5e:f9:0a:02:96:6a:
e4:6f:2e:f9:2b:36:c8:d4:52:b8:db:b0:2c:5b:8f:4b:09:c6:
d8:d2:e9:7b:3c:8f:50:c4:ff:e0:d4:a8:a6:bb:0a:a5:40:b4:
85:0a:02:f1:c5:6a:ea:61:36:e6:21:d7:2a:7c:f9:40:8f:16:
61:35:e4:7c:6c:4e:c9:15:66:ef:f2:8d:f9:0a:53:35:dc:f7:
cf:91:27:8b:66:f4:d0:3e:36:7d:de:0f:5f:4a:34:3c:c5:6b:
a2:94:14:e8:e1:95:a8:c7:83:60:56:d3:f3:2b:83:fa:8e:74:
ee:07:6e:06:aa:f5:f8:68:32:db:9c:2f:0e:67:bb:53:4a:e6:
c4:dc:f7:0d:19:20:d7:8e:df:c7:4d:2b:4e:bc:1e:6d:4d:20:
21:2d:a7:60:de:51:52:4e:ec:0b:c6:d8:5e:09:7b:b4:fd:f1:
07:dc:4b:99:e9:f0:e1:12:b7:a5:75:7f:69:27:77:9e:81:07:
42:2e:a4:0a:7c:94:7f:a2:36:12:a3:e2:a0:97:ae:e4:74:6a:
b7:5e:03:c1:2f:8e:20:c1:21:06:4a:0e:7a:fe:d0:c7:c6:e6:
b5:dc:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:00:06 2026 by rpki-client